CX Issue

[mateen.padela]

Hello All,

I have deployed 5515-x ASA with IPS+AVC+WSE license in a client place.

Have installed cisco prime security manager and configured web filtering policies as well for URL block and stuff. and its working fine.

But when i integrate it with the AD and try to import user group and then use those user group in different policies and enable authentication on the Identity policy. I am getting prompts for user credentials when anyone tried to browse.

But unfortunately the authentication doesnt get complete and it fails and the users cannot browse the internet.

Any thoughts ?.

Regards,

Matt

[Collin Clark]

Do you have CDA installed and configured? Your authentication policy is set to prompt for auth and it should be passive with CDA and AD.

[mateen.padela]

Hi Collin,

i actually havent configured CDA because first i want to try the authentication. and CDA will help me with the user based logs.

correct me if i am wrong.

-Matt

[Collin Clark]

So you've added the CX to AD and when you hit the test button it's successful?

[mateen.padela]

Yes Collin. That's right. The server IP and login details once given and tested. Shows successful.